$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa File: d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa (raw, json) Hash identifier: r1wo1Jl2Fb8auDeeq8sbdQfUAUAdHsQdKNDKhIQmYvk= Subject key identifier: C7:7E:84:EC:FE:0E:B5:B2:1D:13:67:87:02:93:22:AB:75:9C:DA:E2 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584988CF273308493E0430E2C900 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 16509 IP address blocks: 158.115.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:27:33:08:49:3e:04:30:e2:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=12d509a8-4bac-4d1d-910e-a22806aba3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:80:56:b8:90:7b:6c:d3:2e:89:11:a2:c0: 53:1c:06:ea:b8:13:e0:a4:02:be:a4:f2:11:f8:5b: 4e:f2:fe:0e:03:b1:31:a6:ea:dd:a2:a6:63:33:04: ae:0f:0b:5a:0a:75:e2:a5:30:d6:5c:dd:61:37:61: c7:3c:4b:8c:eb:ab:af:50:38:27:74:88:1f:7b:8c: ae:83:77:99:de:15:89:99:2d:9a:a9:2d:7e:8f:ef: a8:ae:a7:29:08:02:98:7c:d6:e2:51:4b:82:6b:1b: 2d:0a:3b:5b:3a:62:a4:7c:24:34:93:3e:8e:3d:a9: 5a:80:9a:40:7a:82:d4:c8:0e:48:a9:11:9d:4c:9f: 72:84:52:3e:cb:4d:4d:ad:8a:5b:c8:1f:b9:cd:36: c1:ed:71:a9:4b:5f:4c:3e:75:6e:96:28:7e:37:78: 96:a6:4f:3f:67:64:c8:d5:19:fc:79:e9:07:e1:8f: 09:3a:50:bd:d7:02:72:fb:f8:fc:e6:4b:71:eb:23: f0:48:30:8b:07:ac:26:1b:6c:bc:cc:27:f3:d6:f3: f1:e8:62:6a:2e:4f:c4:85:7a:a9:93:99:81:d9:f2: d0:53:e9:10:29:c0:67:50:a4:be:9b:9a:d9:07:ff: d7:3f:16:c4:58:19:a9:bd:b1:cc:bf:d0:bf:8c:11: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7E:84:EC:FE:0E:B5:B2:1D:13:67:87:02:93:22:AB:75:9C:DA:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e4:e2:15:02:bd:55:f6:cd:97:4d:45:b9:be:59:c3:84:a6: 53:d6:80:fb:e6:10:2e:5b:4c:59:44:47:08:80:f8:ea:b4:9f: 15:93:70:d2:e3:6c:6f:ca:b0:aa:7e:44:48:94:0a:e6:bb:e7: 0a:04:97:a6:6b:c8:9e:8a:b5:ef:56:af:19:2f:05:2b:55:27: d8:e1:25:bc:aa:0c:54:ce:66:8f:10:06:f3:c4:75:89:6b:52: 0f:eb:1e:87:9c:d3:a0:8c:da:d6:00:1b:11:95:e1:36:aa:31: 15:7a:dd:1d:8b:a4:f6:03:c0:1b:69:86:91:8e:e8:cb:22:41: 9a:16:5d:27:e7:9c:bf:a0:dc:eb:de:f8:60:b2:93:a3:7e:f2: fc:28:ce:ef:4d:92:f1:90:5d:cb:4a:5e:e1:57:83:72:7b:45: 66:98:8a:18:e8:81:fe:66:9d:2f:eb:68:01:f7:b9:c2:6d:85: 7d:9e:45:60:a5:7b:2e:c0:11:a8:b8:11:ae:ae:89:72:6a:08: 36:1e:22:d2:b1:5e:de:d5:a3:f0:c0:2d:cd:36:26:a2:e2:9c: 3f:f6:85:a3:f1:33:09:49:c6:d2:56:7c:1a:07:a6:fa:01:d4: 6d:b5:c3:c9:df:25:42:eb:53:6b:17:34:39:91:f1:6d:5f:f0: d6:ec:19:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyczCEk+BDDiyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MTJkNTA5YTgtNGJhYy00ZDFkLTkxMGUtYTIyODA2YWJhM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKuAVriQe2zTLokRosBTHAbquBPgpAK+pPIR +FtO8v4OA7ExpurdoqZjMwSuDwtaCnXipTDWXN1hN2HHPEuM66uvUDgndIgfe4yu g3eZ3hWJmS2aqS1+j++orqcpCAKYfNbiUUuCaxstCjtbOmKkfCQ0kz6OPalagJpA eoLUyA5IqRGdTJ9yhFI+y01NrYpbyB+5zTbB7XGpS19MPnVulih+N3iWpk8/Z2TI 1Rn8eekH4Y8JOlC91wJy+/j85ktx6yPwSDCLB6wmG2y8zCfz1vPx6GJqLk/EhXqp k5mB2fLQU+kQKcBnUKS+m5rZB//XPxbEWBmpvbHMv9C/jBH3owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd+hOz+DrWyHRNnhwKTIqt1nNriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZDVjODhlNDUtZmUyNy0z ZDZjLTk4NjktY2RhZjU3MjcxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzk4hUCvVX2zZdNRbm+WcOEplPWgPvmEC5bTFlERwiA+Oq0nxWTcNLj bG/KsKp+REiUCua75woEl6ZryJ6Kte9WrxkvBStVJ9jhJbyqDFTOZo8QBvPEdYlr Ug/rHoec06CM2tYAGxGV4TaqMRV63R2LpPYDwBtphpGO6MsiQZoWXSfnnL+g3Ove +GCyk6N+8vwozu9NkvGQXctKXuFXg3J7RWaYihjogf5mnS/raAH3ucJthX2eRWCl ey7AEai4Ea6uiXJqCDYeItKxXt7Vo/DALc02JqLinD/2haPxMwlJxtJWfBoHpvoB 1G21w8nfJULrU2sXNDmR8W1f8NbsGZ0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:09 2025 by rpki-client